CVE-2021-42537

—

CVSS 3.1

7.5 high

EPSS

<1%p40

Published

Jul 27, 2022 (Jul 27, 2022)

Modified

Jun 17, 2026

Description

VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Vendors: visam
Products: vbase web-remote
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.